rvxlab / hcaptcha

hCaptcha for Laravel 8.x and later

Hey!

I'm RVxLab, a full-stack developer in Queensland, Australia.

Some of my projects

tailwind-plugin-ios-full-height

A TailwindCSS plugin to help dealing with 100vh in Safari for iOS and iPadOS.

hcaptcha

A drop-in replacement fork of Scyllaly's HCaptcha package with modernized code, improved tests and a few more features.

filament-colorpicker (deprecated)

A plugin for Laravel Filament that wraps Vanilla Picker into a component.

As of the 21st of April 2022 this package has been deprecated as Filament has a built-in colour picker now.

nova-tabs (maintainer of 3.x)

A plugin for Laravel Nova to show tabs on a resource's detail and edit pages.

Created by Bajram Emini and version 3.x was maintained by me.

Version 4.x is being maintained by Marc Filipan.

Some stats

Show me!

hcaptcha's Issues

Add a proper fake on the facade

Instead of needing to manually mock the display and verify calls, it's nice to be able to just call HCaptcha::fake() and have it automatically set some reasonable defaults.

This will require the introduction of a contract:

interface HCaptchaContract
{
    public function display(array $attributes = []): string;

    public function displayWidget(array $attributes = []): string;

    public function displaySubmit(string $formIdentifier, string $buttonText = 'submit', array $attributes = []): string;

    public function renderJs(?string $lang = null, bool $hasCallback = false, string $onLoadClass = 'onloadCallBack'): string;

    public function verifyResponse(string $response, ?string $clientIp = null): bool;

    public function verifyRequest(Request $request): bool;

    public function getJsLink(?string $lang = null, bool $hasCallback = false, string $onLoadClass = 'onloadCallBack'): string;
}

For the fake, any of the display methods can return an input with any value, so it can be rendered and form validation will succeed.

The getJsLink method can just return an empty string, that's not really important here.

The verify methods should return true by default with the option to mock that call as needed by means of a shouldVerify(bool) or a successfullyVerifies() and failsVerification() pair.

Fix Github Actions for Laravel 10

• Remove PHP 8.0 + Laravel 10 test (unsupported combination) fixed
• Fix Laravel 10 tests (has some deprecations)

Prepare for Laravel 10 support

Laravel 10 will be released early February.

Ensure that this package can support Laravel 10.

Extract HTML generation into views

HTML is currently generated in the HCaptcha class. It's better to extract them to separate views to they can be published.

Widget (HCaptcha::display)

Should be moved to widget.blade.php

Submit (HCaptcha::displaySubmit)

This needs to be split into 2 files:

• submit.blade.php
• default-submit-callback.blade.php

Script (HCaptcha::renderJs)

Should be moved to script.blade.php

Lag when using invisible widget

I copied the example invisible widget into my application, when clicking the button it takes about 5 seconds before the captcha shows up, and it skips over my form validation.

Edit: Seems hCaptcha is just slow... Would there be a way to add a class to the button, just as disabled, when the hCaptcha is loading, or to show a loading bar.

My form still does not get validated when clicking the button, I'm using MaterializeCSS

Create a validation rule class

Currently the only way to reference validation is using the extended validation rule.

It would be nice if we can also support validation objects as well.

https://laravel.com/docs/9.x/validation#using-rule-objects